Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
File: ilX0iZwkbRdUoWiC0OdoB-uOK14.mft (raw, json)
Hash identifier: xKSH3uNWM7B9Gosygd9U883Zn8iFcay3fzzsbGpEIMY=
Subject key identifier: 76:59:FD:E7:CC:78:E3:85:54:E9:72:79:CD:60:47:51:62:E2:B0:96
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial: 019A50E25EEE53370E199994D0ADE4F3CF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
Manifest number: 1108
Signing time: Tue 04 Nov 2025 22:00:03 +0000
Manifest this update: Tue 04 Nov 2025 22:00:03 +0000
Manifest next update: Wed 05 Nov 2025 22:00:03 +0000
Files and hashes: 1: ilX0iZwkbRdUoWiC0OdoB-uOK14.crl (hash: WyOotF3Oazl7U4nLCpQ4yQGtKE5764432xf2LwPE9sQ=)
2: yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa (hash: 6I7n0xCvQ3FC2MV2Pqk6KjdQE1M7SQrxGUU9YrmgwbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:5e:ee:53:37:0e:19:99:94:d0:ad:e4:f3:cf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Validity
Not Before: Nov 4 22:00:03 2025 GMT
Not After : Nov 5 22:00:03 2025 GMT
Subject: CN=7659fde7cc78e38554e97279cd60475162e2b096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:4f:c3:62:c4:96:cd:47:dd:b3:4c:5d:da:
d1:cd:9d:29:e1:d2:21:25:95:b1:08:f4:af:e9:08:
99:40:29:9c:97:79:f2:0b:98:b6:0b:d5:66:88:31:
5f:4a:41:74:92:ff:3e:17:9f:8e:aa:9c:29:87:92:
68:b6:cb:0f:7e:b1:bd:d8:16:e5:ac:f6:ed:f3:1a:
04:13:86:e7:5f:4f:32:e8:77:9c:ff:bd:dd:a9:d4:
d8:d3:f7:94:be:18:b7:82:a8:bd:d9:c3:a7:cc:a1:
3e:b5:ff:60:52:13:f5:6d:ad:79:8f:04:52:92:53:
df:ca:c2:8e:67:20:07:8d:38:ce:14:81:f7:0c:42:
3a:22:6b:81:fa:8d:23:f5:3c:a6:65:e4:57:87:e3:
ab:2b:2b:09:30:19:f9:87:f9:4c:43:9f:6a:b6:13:
e2:a4:ab:82:5c:59:2c:00:65:f2:5c:4b:d7:59:3e:
ec:f4:a2:08:53:0a:f5:ee:5a:d7:61:a0:09:a4:11:
0d:65:45:9b:95:3c:dc:80:58:83:75:b6:43:df:a1:
90:13:7c:e5:10:6f:d3:8c:85:10:79:05:7d:1b:4f:
25:c1:71:a5:f6:d3:62:e3:dd:be:af:a6:86:64:47:
13:59:ea:89:f7:10:99:cf:fe:06:c0:08:9c:60:71:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:59:FD:E7:CC:78:E3:85:54:E9:72:79:CD:60:47:51:62:E2:B0:96
X509v3 Authority Key Identifier:
keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1a:22:56:96:10:39:1e:56:4b:ae:e8:39:93:87:f7:e3:e3:
58:66:b9:15:06:96:29:95:ca:6f:1d:46:af:8d:a8:6c:cb:98:
09:cc:54:ef:9c:3b:b7:07:4b:aa:9d:31:1c:aa:73:01:23:ba:
bd:f5:e5:90:2b:0c:38:40:18:f4:d1:cc:f2:e7:1f:78:08:4a:
0b:62:e3:5c:cc:34:f7:0b:12:85:46:51:2a:1d:14:6f:8c:95:
4a:1b:f0:14:55:28:9b:89:7c:75:d5:be:6c:40:e4:9b:71:23:
02:19:21:d1:dd:f0:d2:58:78:87:30:67:3b:c6:e4:6f:1f:39:
c4:9b:36:5d:67:97:8d:3b:a3:8c:6b:a3:da:77:2a:3c:90:44:
bd:63:56:8c:31:bd:83:f9:57:85:72:d0:47:ce:e0:89:aa:5c:
5b:24:50:a4:a8:41:c4:04:b8:a4:a0:b7:10:75:ed:9a:a9:da:
c4:13:5d:41:f3:1e:7a:1f:ac:fc:05:79:4a:35:1e:0b:ea:96:
fb:f1:2c:a0:b5:af:1b:fc:23:ca:9c:1a:4c:3f:8b:31:4b:ef:
a1:2e:bd:57:ec:17:04:c3:87:7d:83:c5:bf:8f:da:4a:81:8b:
a3:f1:fa:c3:5c:7c:38:8d:ef:b3:67:7d:ff:84:dc:b2:88:a2:
5e:ee:15:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4l7uUzcOGZmU0K3k888gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNTVmNDg5OWMyNDZkMTc1NGExNjg4MmQwZTc2ODA3ZWI4
ZTJiNWUwHhcNMjUxMTA0MjIwMDAzWhcNMjUxMTA1MjIwMDAzWjAzMTEwLwYDVQQD
Eyg3NjU5ZmRlN2NjNzhlMzg1NTRlOTcyNzljZDYwNDc1MTYyZTJiMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvFPw2LEls1H3bNMXdrRzZ0p4dIh
JZWxCPSv6QiZQCmcl3nyC5i2C9VmiDFfSkF0kv8+F5+Oqpwph5JotssPfrG92Bbl
rPbt8xoEE4bnX08y6Hec/73dqdTY0/eUvhi3gqi92cOnzKE+tf9gUhP1ba15jwRS
klPfysKOZyAHjTjOFIH3DEI6ImuB+o0j9TymZeRXh+OrKysJMBn5h/lMQ59qthPi
pKuCXFksAGXyXEvXWT7s9KIIUwr17lrXYaAJpBENZUWblTzcgFiDdbZD36GQE3zl
EG/TjIUQeQV9G08lwXGl9tNi492+r6aGZEcTWeqJ9xCZz/4GwAicYHH6xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZZ/efMeOOFVOlyec1gR1Fi4rCWMB8GA1UdIwQY
MBaAFIpV9ImcJG0XVKFogtDnaAfrjiteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAt
YmVkYWZiMDkyMmRkLzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAtYmVkYWZiMDkyMmRk
LzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBoiVpYQ
OR5WS67oOZOH9+PjWGa5FQaWKZXKbx1Gr42obMuYCcxU75w7twdLqp0xHKpzASO6
vfXlkCsMOEAY9NHM8ucfeAhKC2LjXMw09wsShUZRKh0Ub4yVShvwFFUom4l8ddW+
bEDkm3EjAhkh0d3w0lh4hzBnO8bkbx85xJs2XWeXjTujjGuj2ncqPJBEvWNWjDG9
g/lXhXLQR87giapcWyRQpKhBxAS4pKC3EHXtmqnaxBNdQfMeeh+s/AV5SjUeC+qW
+/EsoLWvG/wjypwaTD+LMUvvoS69V+wXBMOHfYPFv4/aSoGLo/H6w1x8OI3vs2d9
/4TcsoiiXu4VvA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:02:44 2025 by rpki-client